Identity Management Service › Getting Started with Identity Management › How to Set Up On-Premise Provisioning

How to Set Up On-Premise Provisioning

As an administrator who wishes to set up communication between cloud-based and on-premise environments and allow on-premise provisioning, follow this process:

1. Receive the username, password, the server certificate, and the URLs for the cloud-based CA IAM Connector Server messaging interface from the CA CloudMinder System Administrator for your environment. Make a note of the time settings from the cloud-based Connector Server.
2. Download and install CA IAM Connector Server in your on-premise environment. The installation package is available from support.ca.com.
3. Export the certificate that the connector server installer creates, and deliver it to the System Administrator if it is needed. The System Administrator tells you if this is required in your environment. If you have an existing server certificate, you can use it instead. After you install IAM Connector Server, add the certificate to the ssl keystore. The ssl keystore is a java keystore located in the jcs/conf folder of your connector server installation.

   Note: You can only add one private key to the keystore. CA IAM Connector Server only supports one private key.

4. Install the certificate that you received from the System Administrator in your on-premise Connector Server.
5. Go to the cloud-based CA IAM Connector Server interface and add any endpoint routes that you want.

This diagram illustrates the set-up steps: